CVE-2022-46487

Improper initialization of x87 and SSE floating-point configuration registers in the sconeentry component of SCONE before 5.8.0 for Intel SGX allows a local attacker to compromise the execution integrity of floating-point operations in an enclave or access sensitive information via side-channel...

CVE-2022-46487

SCONE vulnerability CVE-2022-46487: In SCONE before 5.8.0, the __scone_entry component improperly initializes x87 and SSE floating-point configuration registers, enabling a local attacker with SGX enclaves to compromise execution integrity of FP operations or exfiltrate information via side-chann...

CVE-2022-46487

Improper initialization of x87 and SSE floating-point configuration registers in the sconeentry component of SCONE before 5.8.0 for Intel SGX allows a local attacker to compromise the execution integrity of floating-point operations in an enclave or access sensitive information via side-channel...

CVE-2023-51663

Hail is an open-source, general-purpose, Python-based data analysis tool with additional data types and methods for working with genomic data. Hail relies on OpenID Connect OIDC email addresses from ID tokens to verify the validity of a user's domain, but because users have the ability to change...

Design/Logic Flaw

Hail is an open-source, general-purpose, Python-based data analysis tool with additional data types and methods for working with genomic data. Hail relies on OpenID Connect OIDC email addresses from ID tokens to verify the validity of a user's domain, but because users have the ability to change...

CVE-2023-51663 Hail authentication can be bypassed by changing email address

Hail is an open-source, general-purpose, Python-based data analysis tool with additional data types and methods for working with genomic data. Hail relies on OpenID Connect OIDC email addresses from ID tokens to verify the validity of a user's domain, but because users have the ability to change...

CVE-2023-51663

Hail authentication issue (CVE-2023-51663) affects Hail with Hail Batch accounts. Root cause: relying on OIDC email addresses to verify user domain; users can change their emails, enabling creation of Hail Batch accounts in domains they shouldn’t access. Impact stated: attacker cannot access priv...

MAL-2023-8762 Malicious code in tsrcrcetest1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 81236969e1e7e6ddfdffe293e1d918b357ce193fc362e722a7b75bce480e1bbb The OpenSSF Package Analysis project identified 'tsrcrcetest1' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in tsrcrcetest1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 81236969e1e7e6ddfdffe293e1d918b357ce193fc362e722a7b75bce480e1bbb The OpenSSF Package Analysis project identified 'tsrcrcetest1' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8761 Malicious code in rcetest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9ee58b9e6d758cb339bd2d6605b131d84f7829a9299889967e3f5ca31d69d120 The OpenSSF Package Analysis project identified 'rcetest' @ 1.0.0 npm as malicious. It is considered malicious because: - The package executes o...

MAL-2023-8760 Malicious code in chain00x_rce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3f3656f34947ab9c7e747961055e3697ca5d51e275e42ca7fae5ab01f1c2e7ef The OpenSSF Package Analysis project identified 'chain00xrce' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Exploit for Out-of-bounds Write in Hutool

json.org CVE-2022-45688 false positive The project contains...

Exploit for Out-of-bounds Write in Hutool

json.org CVE-2022-45688 false positive The project contains...

Mastering Industrial Cybersecurity: The Significance of Combining Vulnerability Management with Detection and Response

Written by Elad Ben-Meir, CEO SCADAfence, a Honeywell company. In today's digital era, where industries are increasingly reliant on advanced technologies, safeguarding critical infrastructure against cyber threats has become paramount. The convergence of operational technology OT and information...

Exploit for Out-of-bounds Write in Hutool

json.org CVE-2022-45688 true positive The project illustrate...

BestEdrOfTheMarket - Little AV/EDR Bypassing Lab For Training And Learning Purposes

Little AV/EDR Evasion Lab for training & learning purposes. ️ under construction..​ | | | | | | \ / \ / | | | | | \ / / | | | | | | | | | | | | | | | | | | ' \ / \ | | | /\ \ | | || || | | || | | | | | | | | / |/||/| ||/|| \ /|| || || ||| | / | | | | | | |/| |/ | '| |/ / \ | | | | | | | |...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

log4shell false positive This is a simple web project with a...

The vulnerability of the analysis component of the DOE-file software for simulation and automation of discrete events in Arena Simulation allows a perpetrator to execute arbitrary code.

The vulnerability of the DOE-file analysis component of the Arena Simulation software for modeling and automating discrete events involves the ability to read beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

MAL-2023-8745 Malicious code in @pkg-m/m (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a729a302e12ce9d988b8cd980f21cbf38d7e40262fdc86d5d7a0bbc7427e5635 The OpenSSF Package Analysis project identified '@pkg-m/m' @ 1.3.9 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8744 Malicious code in formated (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 469915f0cc096d71a5ad3349a9e1203ffbdbd158fcb529c064aca57d2dce22e8 The OpenSSF Package Analysis project identified 'formated' @ 0.1.0 npm as malicious. It is considered malicious because: - The package...